CVE-2021-27285
CVSS 3.1 Score 8.4 of 10 (high)
Details
Published Jan 6, 2025
Updated: Jan 7, 2025
CWE ID 276
Summary
CVE-2021-27285 is a vulnerability impacting Inspur ClusterEngine version 4.0. This issue grants attackers local privileges through the /opt/tsce4/torque6/bin/getJobsByShell binary, enabling them to execute arbitrary commands. Successful exploitation allows attackers to escalate their privileges within the system. This vulnerability poses a significant risk to systems running Inspur ClusterEngine v4.0 and requires immediate remediation.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Inspur Group